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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Claims 1-22 (canceled) 

23. (Currently Amended) A method of securely initializing authenticating subscriber 
and security data in a mobile routing system when the subscribers are also subscribers of a radio 
communication network, the method comprising: 

ro runnin pperforming a first run of an authentication and key agreement procedure 
dofinod for in_the radio communication network, between a mobile node and an authentication 
server of the radio communication networ k, so as to authenticate the mobile node to the radio 
communication network ; 

initiating an authentication procedure with a stable forwarding agen t of the mobile 
routing system; 

performing a second run of the authentication and kev agreement procedur e between the 
mobile node and the authentication server so as to generate a shared secret; 

providing a-the shared secret resulting from tho r e running of th e auth e ntication and k e y 
agreement procedur e to a-the stable forwarding agen t of tho mobile routing oystom, and using the 
shared secret to authenticate the mobile node to the stable forwarding agent; 

sending a public kev from the mobile node to the stable forwarding agent; 

agreeing upon keys by which further communications between the mobile node and the 
stable forwarding agent can be secured; 
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following authentication of the mobile node to the stable forwarding agent, collecting at 
the stable forwarding agent subscriber contact information from said authentication server; and 

using th e subscrib e r information and k e ys in providing mobility s e rvices to subscrib e r 
mobil e nod e s and correspond e nt nod e s, including using the subscriber contact information to 
assign a Fully Qualified Domain Name and/or IP address to the mobile nod e; and 

updating a subscriber database and DNS server with the Fully Qualified Domain name 
and/or IP address and the public key provided by the mobile node . 

24. (Currently Amended) A method according to claim 23, further comprising: 
transporting messages associated with the r e running step second run , between the stable 

forwarding agent used by a mobile node and the authentication server via the stable forwarding 
agent. 

25. (Currently Amended) A method according to claim 23, further comprising: 

sending session keys, agreed upon during the fe-fun -second run of the authentication 
procedure, from the authentication server to the stable forwarding agent. 

26. (Previously Presented) A method according to claim 23, further wherein the mobile 
routing system is a Mobile IP based system, and the stable forwarding agent is a Home Agent. 

27. (Previously Presented) A method according to claim 23, wherein the mobile routing 
system is a HIP based system. 
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28. (Previously Presented) A method according to claim 23, wherein said authentication and 
key agreement procedure is the Authentication and Key Agreement procedure specified by 
3GPP. 

29. (Currently Amended) A method according to claim 23, wherein the collected subscriber 
contact information comprises one or more of the following: 

the name and postal address of a subscriber; 

the telephone number associated with a subscriber; 

the existing Fully Qualified Domain Name for a subscriber; and 

the status of any mobility services established earlier for a subscriber. 

30. (Currently Amended) A stable forwarding agent of a mobile routing system for use in 
securely authenticating subscriber and security data in a mobile routing system when the 
subscribers are also subscribers of a radio communication netwo rk, where a first run of an 
authentication and key agreement procedure has been performed in the radi o communication 
network between a mobile node and an authentication server of the radio communication 
network so as to authenticate the mobile node to the radio communication network , the stable 
forwarding agent comprising: 

a relay for relaying messages associated with a re-Fu nsecond run of an-the_authentication 
and key agreement procedure between a-the mobile node and aa-the authentication node of a-the 
radio communication network , the second run resulting in generation of a sha red secret; 
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a receiver for receiving a -and using the shared secret from th e authentication s e rv e r 
following compl e tion of th e proc e dur e for using tho shar e d s e cret to authenticate the mobile 
node,, and-for collecting subscriber contact information from the authentication serve r, and for 
receiving a public key from the mobile node ; 

a key determining processor for agreeing upon keys by which further communications 
between the mobile node and the stable forwarding agent can be secured; and 

a mobility service provisioning processor for using said subscrib e r information and k e ys 
in th e provision of mobility s e rvic e s to subscrib e r mobil e nod e s including using the subscriber 
contact information to assign a suitable Fully Qualified Domain Name and/or IP address to said 
mobile node and for updating a subscriber database and DNS server with the Fully Qualified 
Domain name and/or IP address and the public key provided by the mobile node . 
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